USB Forensics

Universal Serial Bus(USB) flash drives, commonly known as USB flash drives are the most common storage devices that can be found as evidence in Digital Forensics Investigations. Using USB and external drives in the workplace may let nasty users remove/exfiltrate sensitive or confidential information from a system without any authorization. To resolve this issue, forensic examination of systems comes into the picture.

1. 1Lessons6 lessons

   1. 1.1Introduction to USB ForensicsPreview5 min
   2. 1.2USB Registry Key5 min
   3. 1.3USB Event Logs5 min
   4. 1.4Folder Access Analysis via Shellbags5 min
   5. 1.5File Access Analysis via Jumplists5 min
   6. 1.6Automated USB Parsers Tools5 min